| Package | Affected versions | Patched versions |
|---|---|---|
| wp svg icons | ≤ 3.2.3 |
The WP SVG Icons WordPress plugin through 3.2.3 does not properly validate uploaded custom icon packs, allowing an high privileged user like an admin to upload a zip file containing malicious php code, leading to remote code execution.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free